
腾讯玄武实验室安全动态推送
Tencent Xuanwu Lab Security Daily News
-
[ Compiler ] 深入理解编译器原理: https://towardsdatascience.com/understanding-compilers-for-humans-version-2-157f0edb02dd
-
[ Firmware ] 逆向 Technicolor(TC7210) 路由器的嵌入式 Linux 固件: https://www.serializing.me/2018/09/30/reversing-the-tc7210-embedded-linux-firmware/
-
[ MalwareAnalysis ] Roaming Mantis Part 3:利用 iOS 设备挖矿并通过恶意内容分发系统进行传播: https://securelist.com/roaming-mantis-part-3/88071/
-
[ Others ] 隐藏 Bash 命令历史的技巧: https://digi.ninja/blog/hiding_bash_history.php
-
[ Tools ] 可以在 IDA 中加载 iOS 12 kernelcaches 和 PAC 代码的脚本: https://github.com/Synacktiv/kernelcache-laundering
-
[ Vulnerability ] Debian/Ubuntu evince 的 AppArmor 策略绕过,来自 Project Zero: https://bugs.chromium.org/p/project-zero/issues/detail?id=1643
-
[ Vulnerability ] Foxit PDF Reader 中的多个漏洞披露: https://blog.talosintelligence.com/2018/10/foxit-pdf-reader-multiple-vulnerabilities.html
-
[ Vulnerability ] Vectra Cognito 中的多个漏洞披露: ” https://www.synacktiv.com/ressources/advisories/Vectra_Cognito_cve_2018_14889_14890_14891.pdf